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DETAILED ACTION 

This action is in response to Applicant's amendment filed on 1 1/17/2008. 
Independent Claims 1 and 8 have been amended. Dependent claims 4, 5, 11 and 12 
have been amended to correct for cancelled claims 3 and 10. Claims 1 , 2, 4-9 and 
11-14 are now pending in the present application. The applicant's amendments to 
claims are shown in bold and italics, and the examiner's response to the claim 
amendments is shown in bold in this office action. This Action is made FINAL. 

Specification 

The disclosure is objected to because of the following informalities: 
• In the amended title, please change "static" to - statistical ~ 
Appropriate correction is required. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 
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Claims 1, 2, 4, 7-9, 11 and 14 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Wakayama et al. (U.S. Patent Application Publication # 2004/0136368 
A1). 

Consider claim 1, Wakayama et al. show and disclose a statistical information 
extraction method (abstract which discloses a method using a packet transfer apparatus 
with a statistics information collecting processor and a line card that transfers header 
information of packets to the statistics information collecting processor; further 
disclosing that on the basis of the statistics information collected, the setting of the 
search table to be provided for the line card will be renewed; Figs. 1-2 and paragraphs 
0053 and 0057 further describe the claimed method in detail), comprising: 
a first step of setting a table for retrieving a pattern to which a user policy is reflected 
(Table 117 shown in Fig. 3 that contains entries with specific source and destination IP 
addresses used as search key to retrieve a pattern from the transmitted packets; the 
search key being based on a user policy of assigning specific packets to designated line 
cards as shown in Fig. 3; paragraph 0061 discloses the corresponding details, thereby 
disclosing setting a table for retrieving a pattern to which a user policy is reflected); 
a second step of retrieving the pattern from received packets based on the table (Fig. 2; 
paragraph 0057 which discloses a received packet buffer 1 14, a packet processing 
engine 1 16, a header buffer 120, and a search table 1 17 in which the packet processing 
engine stores packet header as well as information concerning correspondence 
relationship of processing of the packet, and memory 122 to store the search table 117, 
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thus disclosing retrieving the pattern from received packets based on the table); and 
a third step of storing statistic information of the pattern retrieved (Fig. 4, that shows a 
Header Information Analyzer 152, an Adder 153 for counting the number of packets 
processed, and a Statistics Table 154 for storing statistics information obtained by 
counting by the adder; paragraph 0062 discloses the same details); 
wherein the first step sets in a first table a packet type, an error type, and a 
pattern extraction position within a received packet corresponding to those 
types, sets in a second table a retrieval pattern corresponding to the pattern 
extraction position (Fig. 10, step 5020, that shows a packet header being 
extracted and stored in a header buffer; Fig. 8 shows the table containing stored 
header information; Figs. 12-13 which show the layout of the fields that make up 
the Ethernet Header and the IP Header extracted and stored in the header buffer, 
specifically Frame Type (packet type) field 603 in Fig. 12, and TTL (error type) and 
Protocol fields in Fig. 13; the layout of fields (for example Source IP Address and 
Destination IP Address) shown in Fig. 13, showing pattern extraction positions 
and field lengths within a received packet header corresponding to the search 
parameters (shown in Fig. 3)); and 

the second step determines that the pattern has been retrieved when a pattern of 
the received packet is retrieved based on the pattern extraction position, and the 
retrieved pattern is matched with the retrieval pattern set in the second table (Fig. 
11, step 5230 which shows that the pattern of search key (shown in Fig. 3) has 
been extracted from the packet header based on the pattern extraction position 
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(shown in IP header 610 in Fig. 13); step 5240 which judges flow by matching the 
retrieved pattern with the retrieval pattern set in the second table (shown in Fig. 
3); paragraphs 0084-0085 disclose the same details). 

Consider claim 2, and as applied to claim 1 above, Wakayama et al. disclose 
the claimed statistical information extraction method, wherein the first step sets in the 
table whether or not the received packet should be made a learning object (Fig. 10; 
paragraph 0073 which discloses that the packet processing engine 116 holds a packet 
counter for adding a number of packets processed by the packet processing engine 
116; further disclosing that the packet processing engine increases a value P n of the 
packet counter by 1 , then judges whether or not the value P n matches a predetermined 
integer value N (N greater than 2); if the value P n of the packet counter is equal to N, the 
frame for header transfer 35 shown in Fig. 4 will be generated to transfer to the statistics 
information collecting processor 15, and the value P n of the packet counter will be reset, 
thereby disclosing that every N th packet is to be made a learning object), and 
the second step adds to the table a pattern unable to be retrieved if the received packet 
is set as the learning object in the table when the pattern is unable to be retrieved (Fig. 
10; paragraph 0073 further discloses extracting packet header information and storing it 
in the header buffer in step 5020, if it is every N th packet, which is selected as the 
learning object; since such selected packet is not previously stored in the table, the 
pattern is unable to be retrieved during the table search). 
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Consider claim 4, and as applied to claim 1 above, Wakayama et al. disclose 
the claimed statistical information extraction method, wherein the first step sets the first 
and the second table separately, and retrieves both tables in a partially and mutually 
associated manner (Fig. 3, Search Table 117 that shows a separate second table 
storing a retrieval pattern (Source IP Address, Destination IP Address) corresponding to 
the pattern extraction position shown in the Header Buffer (stored in a first table shown 
in Fig. 8) described in Fig. 10, step 5020, and further detailed in Fig. 13; the two tables 
being set separately, but processed in a partially and mutually associated manner in 
order to extract statistical information from the packets of interest; paragraph 0061 
further describes the search table 1 17 and paragraphs 0073, 0079-0080 disclose the 
details of the fields in the header buffer (Frame Type, TTL, Protocol, etc.)). 

Consider claim 7, and as applied to claim 1 above, Wakayama et al. disclose 
the claimed statistical information extraction method, wherein the third step counts the 
retrieved pattern, and makes the count the statistic information (Fig. 4; paragraph 0062 
which disclose the details of a Statistics Information Collecting Processor that includes 
an adder 153 to count number of packets retrieved, and stores the statistics information 
in the statistics table 154). 

Consider claim 8, Wakayama et al. show and disclose a statistical information 
extraction device (abstract which discloses a packet transfer apparatus with a statistics 
information collecting processor and a line card that transfers header information of 
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packets to the statistics information collecting processor; further disclosing that on the 
basis of the statistics information collected, the setting of the search table to be provided 
for the line card will be renewed; Figs. 1-2 and paragraphs 0053 and 0057 further 
describe the claimed device in detail), comprising: 

a first means setting a table for retrieving a pattern to which a user policy is reflected 
(Table 1 17 shown in Fig. 3 that contains entries with specific source and destination IP 
addresses used as search key to retrieve a pattern from the transmitted packets; the 
search key being based on a user policy of assigning specific packets to designated line 
cards as shown in Fig. 3; paragraph 0061 discloses the corresponding details, thereby 
disclosing setting a table for retrieving a pattern to which a user policy is reflected); 
a second means retrieving the pattern from received packets based on the table (Fig. 2; 
paragraph 0057 which discloses a received packet buffer 1 14, a packet processing 
engine 1 1 6, a header buffer 1 20, and a search table 1 1 7 in which the packet processing 
engine stores packet header as well as information concerning correspondence 
relationship of processing of the packet, and memory 122 to store the search table 117, 
thus disclosing retrieving the pattern from received packets based on the table); and 
a third means storing statistic information of the pattern retrieved (Fig. 4, that shows a 
Header Information Analyzer 152, an Adder 153 for counting the number of packets 
processed, and a Statistics Table 154 for storing statistics information obtained by 
counting by the adder; paragraph 0062 discloses the same details); 
wherein the first means sets in a first table a packet type, an error type, and a 
pattern extraction position within a received packet corresponding to those 
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types, sets in a second table a retrieval pattern corresponding to the pattern 
extraction position (Fig. 10, step 5020, that shows a packet header being 
extracted and stored in a header buffer; Fig. 8 shows the table containing stored 
header information; Figs. 12-13 which show the layout of the fields that make up 
the Ethernet Header and the IP Header extracted and stored in the header buffer, 
specifically Frame Type (packet type) field 603 in Fig. 12, and TTL (error type) and 
Protocol fields in Fig. 13; the layout of fields (for example Source IP Address and 
Destination IP Address) shown in Fig. 13, showing pattern extraction positions 
and field lengths within a received packet header corresponding to the search 
parameters (shown in Fig. 3)); and 

the second means determines that the pattern has been retrieved when a pattern 
of the received packet is retrieved based on the pattern extraction position, and 
the retrieved pattern is matched with the retrieval pattern set in the second table 
(Fig. 11, step 5230 which shows that the pattern of search key (shown in Fig. 3) 
has been extracted from the packet header based on the pattern extraction 
position (shown in IP header 610 in Fig. 13); step 5240 which judges flow by 
matching the retrieved pattern with the retrieval pattern set in the second table 
(shown in Fig. 3); paragraphs 0084-0085 disclose the same details). 

Consider claim 9, and as applied to claim 8 above, Wakayama et al. disclose 
the claimed statistical information extraction device, wherein the first means sets in the 
table whether or not the received packet should be made a learning object (Fig. 10; 
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paragraph 0073 which discloses that the packet processing engine 116 holds a packet 
counter for adding a number of packets processed by the packet processing engine 
116; further disclosing that the packet processing engine increases a value P n of the 
packet counter by 1 , then judges whether or not the value P n matches a predetermined 
integer value N (N greater than 2); if the value P n of the packet counter is equal to N, the 
frame for header transfer 35 shown in Fig. 4 will be generated to transfer to the statistics 
information collecting processor 15, and the value P n of the packet counter will be reset, 
thereby disclosing that every N th packet is to be made a learning object), and 
the second means adds to the table a pattern unable to be retrieved if the received 
packet is set as the learning object in the table when the pattern is unable to be 
retrieved (Fig. 10; paragraph 0073 further discloses extracting packet header 
information and storing it in the header buffer in step 5020, if it is every N th packet, which 
is selected as the learning object; since such selected packet is not previously stored in 
the table, the pattern is unable to be retrieved during the table search). 

Consider claim 11, and as applied to claim 8 above, Wakayama et al. disclose 
the claimed statistical information extraction device, wherein the first means sets the 
first and the second table separately, and retrieves both tables in a partially and 
mutually associated manner (Fig. 3, Search Table 1 17 that shows a separate second 
table storing a retrieval pattern (Source IP Address, Destination IP Address) 
corresponding to the pattern extraction position shown in the Header Buffer (stored in a 
first table shown in Fig. 8) described in Fig. 10, step 5020, and further detailed in Fig. 
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13; the two tables being set separately, but processed in a partially and mutually 
associated manner in order to extract statistical information from the packets of interest; 
paragraph 0061 further describes the search table 117 and paragraphs 0073, 0079- 
0080 disclose the details of the fields in the header buffer (Frame Type, TTL, Protocol, 
etc.)). 

Consider claim 14, and as applied to claim 8 above, Wakayama et al. disclose 
the claimed statistical information extraction device, wherein the third means counts the 
retrieved pattern, and makes the count the statistic information (Fig. 4; paragraph 0062 
which disclose the details of a Statistics Information Collecting Processor that includes 
an adder 153 to count number of packets retrieved, and stores the statistics information 
in the statistics table 154). 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth 
in section 102 of this title, if the differences between the subject matter sought to be patented and the prior 
art are such that the subject matter as a whole would have been obvious at the time the invention was 
made to a person having ordinary skill in the art to which said subject matter pertains. Patentability shall 
not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1 , 148 
USPQ 459 (1966), that are applied for establishing a background for determining 
obviousness under 35 U.S.C. 103(a) are summarized as follows: 
1 . Determining the scope and contents of the prior art. 
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2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness 

or nonobviousness. 

Claims 5, 6, 12 and 13 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Wakayama et al. (U.S. Patent Application Publication # 
2004/0136368 A1) in view of Albert et al. (U.S. Patent Publication # 6,606,316 B1). 

Consider claim 5, and as applied to claim 1 above, Wakayama et al. disclose 
the claimed statistical information extraction method, wherein only when types of the 
received packet correspond to both types set in the first table, the second step retrieves, 
from the second table, a retrieval pattern at the pattern extraction position (Fig. 12, 
paragraph 0077 which discloses packet type field 603 in the header buffer; paragraphs 
0078-0080 further disclose that the upper layer protocol of a packet encapsulated in the 
Ethernet header can be distinguished by the value of the type filed 603 of the Ethernet 
header; further disclosing that a value of 0x0800 indicates an IP header, whereas a 
value of 0x8100 represents a Tag value, a TTL field that indicates error situation when 
set to 0, and a Protocol field that represents TCP protocol when set to a value of 6; any 
or all of these fields can be used as search keys (see Fig. 3), such that only after the 
search key values match those in the incoming packet, the second step retrieves, from 
the second table, a retrieval pattern at the pattern extraction position; Paragraph 0061 
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describes similar details using Source IP Address and Destination IP Address as search 
keys). 

However, Wakayama et al. do not specifically describe that the second step 
retrieves, from the second table, a retrieval pattern at the pattern extraction position 
corresponding to the both types. 

In the same field of endeavor, Albert et al. disclose the claimed method, including 
retrieving a pattern at the pattern extraction position corresponding to both types (Fig. 7 
table 700 that includes Information Flag 704 corresponding to IP header indicator, 
Protocol field 706 indicating TCP as one of the protocol, and Time To Live (TTL) field 
722 that indicates an error packet when it is set to 0; column 16, lines 26-63 and column 
17, lines 35-47 describe these fields in more details; column 3, lines 57-61 disclose 
fixed affinities that identify flows (a set of related packets sent between two end 
stations) for which statistics are to be kept; further disclosing that for each flow that is 
being serviced, the service manager can define a statistics gathering policy that is 
tailored to the flow; column 7, lines 7-1 1 further disclose that TCP connections are 
defined by a 5-tuple fixed affinity that includes the source and the destination IP 
addresses, the source and the destination port numbers, and an identification of the 
protocol (TCP, UDP) that applies to the packet; column 7, lines 62-67 thru column 8, 
lines 1-9 further disclose using wildcard affinities to specify specific sets of flows of 
interest; column 10, lines 65-67 disclosing that each wildcard affinity provides a filter 
which recognizes general classes of packets of interest; column 21 , lines 57-61 and 
column 22, lines 13-15 also disclose the same details, thereby teaching retrieving a 
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pattern at the pattern extraction position corresponding to both types (using information 
flag for selecting IP packet type and using TTL value for determining whether or not the 
packet indicates an error packet)). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to include retrieving a pattern at the pattern extraction 
position corresponding to both types, as taught by Albert et al., in the method of 
Wakayama et al., so that the statistics can be collected for different categories of 
packets. 

Consider claim 6, and as applied to claim 5 above, Wakayama et al., as 
modified by Albert et al., further disclose the claimed statistical information extraction 
method, wherein the first step sets the packet type and the error type in a hard logic, 
and the second step retrieves the pattern extraction position from the first table based 
on the packet type and the error type identified by the hard logic, and further retrieves, 
from the second table, the retrieval pattern corresponding to the pattern extraction 
position (in Albert et al. reference, column 4, lines 3-10, which discloses that the 
discloses invention can be implemented in either hardware (as a device) or in software 
(as a set of computer instructions stored on a computer-readable medium)). 

Consider claim 12, and as applied to claim 8 above, Wakayama et al. disclose 
the claimed statistical information extraction device, wherein only when types of the 
received packet correspond to both types set in the first table, the second means 
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retrieves, from the second table, a retrieval pattern at the pattern extraction position 
(Fig. 12, paragraph 0077 which discloses packet type field 603 in the header buffer; 
paragraphs 0078-0080 further disclose that the upper layer protocol of a packet 
encapsulated in the Ethernet header can be distinguished by the value of the type filed 
603 of the Ethernet header; further disclosing that a value of 0x0800 indicates an IP 
header, whereas a value of 0x8100 represents a Tag value, a TTL field that indicates 
error situation when set to 0, and a Protocol field that represents TCP protocol when set 
to a value of 6; any or all of these fields can be used as search keys (see Fig. 3), such 
that only after the search key values match those in the incoming packet, the second 
step retrieves, from the second table, a retrieval pattern at the pattern extraction 
position; Paragraph 0061 describes similar details using Source IP Address and 
Destination IP Address as search keys). 

However, Wakayama et al. do not specifically describe that the second means 
retrieves, from the second table, a retrieval pattern at the pattern extraction position 
corresponding to the both types. 

In the same field of endeavor, Albert et al. disclose the claimed device, including 
retrieving a pattern at the pattern extraction position corresponding to both types (Fig. 7 
table 700 that includes Information Flag 704 corresponding to IP header indicator, 
Protocol field 706 indicating TCP as one of the protocol, and Time To Live (TTL) field 
722 that indicates an error packet when it is set to 0; column 16, lines 26-63 and column 
17, lines 35-47 describe these fields in more details; column 3, lines 57-61 disclose 
fixed affinities that identify flows (a set of related packets sent between two end 



Application/Control Number: 10/567,589 Page 15 

Art Unit: 2443 

stations) for which statistics are to be kept; further disclosing that for each flow that is 
being serviced, the service manager can define a statistics gathering policy that is 
tailored to the flow; column 7, lines 7-11 further disclose that TCP connections are 
defined by a 5-tuple fixed affinity that includes the source and the destination IP 
addresses, the source and the destination port numbers, and an identification of the 
protocol (TCP, UDP) that applies to the packet; column 7, lines 62-67 thru column 8, 
lines 1-9 further disclose using wildcard affinities to specify specific sets of flows of 
interest; column 10, lines 65-67 disclosing that each wildcard affinity provides a filter 
which recognizes general classes of packets of interest; column 21 , lines 57-61 and 
column 22, lines 13-15 also disclose the same details, thereby teaching retrieving a 
pattern at the pattern extraction position corresponding to both types (using information 
flag for selecting IP packet type and using TTL value for determining whether or not the 
packet indicates an error packet)). 

Therefore, it would have been obvious to a person of ordinary skill in the art at 
the time the invention was made to include retrieving a pattern at the pattern extraction 
position corresponding to both types, as taught by Albert et al., in the device of 
Wakayama et al., so that the statistics can be collected for different categories of 
packets. 

Consider claim 13, and as applied to claim 12 above, Wakayama et al., as 
modified by Albert et al., further disclose the claimed statistical information extraction 
device, wherein the first step sets the packet type and the error type in a hard logic, and 
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the second step retrieves the pattern extraction position from the first table based on the 
packet type and the error type identified by the hard logic, and further retrieves, from the 
second table, the retrieval pattern corresponding to the pattern extraction position (in 
Albert et al. reference, column 4, lines 3-10, which discloses that the discloses invention 
can be implemented in either hardware (as a device) or in software (as a set of 
computer instructions stored on a computer-readable medium)). 

Response to Arguments 

Applicants' arguments filed 1 1/17/2008 have been fully considered but they are 
not persuasive. 

The examiner respectfully disagrees with applicants' arguments as the applied 
references in the prior non-final office action provide adequate support and clarification 
for rejecting the claims. Therefore, the examiner's rejection of 07/17/2008 is maintained 
in this office action. 

Consider independent claim 1. The applicant has argued that the "statistics" 
information collected in the Wakayama (U.S. Patent Application Publication # 
2004/0136368) reference is not the same as the claimed statistics information. The 
examiner begs to differ. The source and destination IP addresses in the packet 
headers do qualify as "statistic" information, as they characterize the "flow" of 
information from a given source to a specific destination, and therefore, are so labeled 
in the cited reference. The applicant further argues that claim 1 features enable a part 
of a header of a packet to be retrieved; in contrast, Wakayama has to retrieve the 
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overall header of the packet. The examiner would like to point out that claim 1 has no 
mention of a packet header at all, so the argument is moot. Therefore, the examiner 
has concluded that the cited Wakayama reference does teach and disclose each and 
every element of claim 1 , which is thus deemed not allowable. No new arguments are 
presented for the other claims, which also remain rejected. 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any response to this Office Action should be faxed to (571) 273-8300 or mailed 

to: 

Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 

Art Unit: 2443 

Hand-delivered responses should be brought to 
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Customer Service Window 
Randolph Building 
401 Dulany Street 
Alexandria, VA 22314 

Any inquiry concerning this communication or earlier communications from the 
Examiner should be directed to Kishin G. Belani whose telephone number is (571) 270- 
1768. The Examiner can normally be reached on Monday-Friday from 6:00 am to 5:00 
pm. 

If attempts to reach the Examiner by telephone are unsuccessful, the Examiner's 
supervisor, Tonia Dollinger can be reached on (571) 272-4170. The fax phone number 
for the organization where this application or proceeding is assigned is (571 ) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free) or 703-305-3028. 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist/customer service whose telephone 
number is (571)272-2600. 
IK. G. B./ 

Examiner, Art Unit 2443 
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